[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_240":241,"_242":243},"routes/_app.x.$handle.$name",{"_103":102,"_32":45,"_112":90,"_27":113,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_20":-5,"_124":125,"_126":127,"_128":25,"_129":130,"_131":59,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":31,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",49,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","019ec8e3-8fe9-75a2-9f23-e932794ecdea","name","fileType","http","content","// dispatch-my-human — a PUBLIC remote MCP server that dispatches an autonomous\n// voice agent to phone your human, handle the conversation itself, and report back.\n// Unlike the puppet sibling (call-my-human-no-middle-agent), the Vapi agent here has a REAL brain:\n// it runs the whole call in-stack (low latency, no per-turn round-trip), then Vapi's\n// post-call analysis returns a structured report.\n// BYOK: connecting users pass their own Vapi creds in the connection URL.\n// No env vars, no server-side keys, no signup.\n//\n// /mcp?vapi_key=…&phone_number_id=…&human_number=%2B1555… ← connect here\n// /api/call/:action same tools as REST (dispatch, report, listen, say, status, end)\n// /webhook/:tenant Vapi server events → SQLite (transcripts + end-of-call analysis)\n// / plain GET = setup instructions; /?t= = live transcript feed\n//\n// A tenant is a short hash of the caller's Vapi key — it scopes call state per user\n// and routes Vapi's webhooks back to the right feed. Keys are never stored.\n\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./db.ts\";\nimport { handleMcp } from \"./mcp.ts\";\nimport { type Ctx, runTool } from \"./tools.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nasync function tenantOf(key: string): Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(key));\n return [...new Uint8Array(d)].slice(0, 6).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function buildCtx(c: any): Promise {\n const q = (k: string) => c.req.query(k) || null;\n const bearer = (c.req.header(\"authorization\") ?? \"\").replace(/^Bearer\\s+/i, \"\") || null;\n const vapiKey = q(\"vapi_key\") ?? bearer;\n return {\n origin: new URL(c.req.url).origin,\n vapiKey,\n phoneNumberId: q(\"phone_number_id\"),\n humanNumber: q(\"human_number\"),\n model: q(\"model\") || \"gpt-4o\", // the agent's brain; override with &model= in the URL\n tenant: vapiKey ? await tenantOf(vapiKey) : null,\n };\n}\n\n// ---------- remote MCP ----------\napp.all(\"/mcp\", async (c) => handleMcp(c.req.raw, await buildCtx(c)));\n\n// ---------- REST mirror of the tools ----------\nconst REST: Record = {\n dispatch: \"dispatch_call\",\n report: \"await_report\",\n answer: \"provide_answer\",\n listen: \"listen\",\n say: \"say\",\n status: \"get_status\",\n end: \"end_call\",\n};\n\napp.all(\"/api/call/:action\", async (c) => {\n const tool = REST[c.req.param(\"action\")];\n if (!tool) return c.json({ error: \"unknown action — use dispatch | report | answer | listen | say | status | end\" }, 404);\n let args: Record = {};\n if (c.req.method === \"POST\") {\n try {\n args = await c.req.json();\n } catch { /* empty body is fine */ }\n }\n try {\n return c.json({ ok: true, result: await runTool(tool, args, await buildCtx(c)) });\n } catch (e) {\n return c.json({ ok: false, error: String(e) }, 400);\n }\n});\n\n// state for the live feed page (tenant id is required — it is unguessable without the key)\napp.get(\"/api/state\", async (c) => {\n const t = c.req.query(\"t\");\n if (!t) return c.json({ error: \"pass ?t= (shown in start_call/get_status results)\" }, 400);\n const call = await db.latestCall(t);\n if (!call) return c.json({ call: null, events: [] });\n const events = await db.recentEvents(call.id, 120);\n return c.json({ call, events });\n});\n\n// ---------- Vapi webhook (per tenant) ----------\napp.post(\"/webhook/:tenant\", async (c) => {\n const tenant = c.req.param(\"tenant\");\n if ((c.req.header(\"x-vapi-secret\") ?? \"\") !== tenant) {\n console.log(\"webhook: bad or missing x-vapi-secret for tenant\", tenant);\n return c.json({ error: \"bad secret\" }, 401);\n }\n const payload = await c.req.json().catch(() => ({}));\n const m = payload?.message ?? {};\n const callId: string = m?.call?.id ?? (await db.latestCall(tenant))?.id ?? \"unknown\";\n console.log(\"webhook:\", tenant, m.type, m.status ?? m.transcriptType ?? \"\", String(m.transcript ?? \"\").slice(0, 120));\n\n const mtype = String(m.type ?? \"\");\n if (mtype.startsWith(\"transcript\")) {\n // type is \"transcript\" or the documented variant 'transcript[transcriptType=\"final\"]'\n const ttype = m.transcriptType ?? (mtype.includes(\"final\") ? \"final\" : \"partial\");\n if (ttype === \"final\") {\n await db.addEvent(tenant, callId, \"transcript\", m.role ?? \"user\", m.transcript ?? \"\");\n await db.setPartial(callId, null);\n } else {\n await db.setPartial(callId, (m.role ?? \"?\") + \": \" + (m.transcript ?? \"\"));\n }\n } else if (mtype === \"conversation-update\") {\n // Fallback transcript source: backfill any user lines the transcript events missed.\n const conv = (m.conversation ?? m.messages ?? []) as Array>;\n const users = conv\n .filter((x) => x.role === \"user\")\n .map((x) => String(x.message ?? x.content ?? \"\"))\n .filter(Boolean);\n if (users.length) {\n const seen = new Set(\n (await db.recentEvents(callId, 80))\n .filter((e) => e.type === \"transcript\" && e.role === \"user\")\n .map((e) => e.content),\n );\n for (const u of users) {\n if (!seen.has(u)) {\n await db.addEvent(tenant, callId, \"transcript\", \"user\", u);\n seen.add(u);\n }\n }\n }\n } else if (mtype === \"status-update\") {\n await db.setCallStatus(callId, m.status ?? \"unknown\", m.endedReason ?? null);\n await db.addEvent(tenant, callId, \"status\", \"system\", String(m.status) + (m.endedReason ? \" (\" + m.endedReason + \")\" : \"\"));\n } else if (mtype === \"end-of-call-report\") {\n // Analysis (summary + structuredData) is computed at end-of-call and rides\n // along in this report. await_report waits for the \"analysis\" event below.\n await db.setCallStatus(callId, \"ended\", m.endedReason ?? null);\n const analysis = m?.analysis ?? {};\n const summary = analysis.summary ?? m.summary ?? \"call ended\";\n await db.addEvent(tenant, callId, \"report\", \"system\", String(summary).slice(0, 1000));\n if (analysis.structuredData !== undefined && analysis.structuredData !== null) {\n await db.addEvent(tenant, callId, \"analysis\", \"system\", JSON.stringify(analysis.structuredData));\n }\n }\n return c.json({});\n});\n\n// ---------- escape hatch: async tool endpoint (per tenant) ----------\n// The agent calls ask_operator; Vapi POSTs here. We record the question and return\n// immediately (no hold) so the agent keeps talking. The operator's answer is pushed\n// into the live call later via provide_answer -> add-message.\napp.post(\"/tool/:tenant\", async (c) => {\n const tenant = c.req.param(\"tenant\");\n const secret = c.req.header(\"x-vapi-secret\") ?? \"\";\n if (secret && secret !== tenant) {\n console.log(\"tool: bad x-vapi-secret for tenant\", tenant);\n return c.json({ error: \"bad secret\" }, 401);\n }\n const payload = await c.req.json().catch(() => ({}));\n const m = payload?.message ?? {};\n const tc = (m.toolCallList ?? [])[0] ?? {};\n const toolCallId: string = tc.id ?? tc.toolCall?.id ?? \"unknown\";\n // Vapi may send arguments as an object OR a JSON string, and under .arguments\n // or .function.arguments depending on shape — handle all of them.\n let rawArgs: unknown = tc.arguments ?? tc.function?.arguments ?? tc.toolCall?.function?.arguments ?? {};\n if (typeof rawArgs === \"string\") {\n try { rawArgs = JSON.parse(rawArgs); } catch { rawArgs = {}; }\n }\n const a = (rawArgs ?? {}) as Record;\n const question = String(a.question ?? a.q ?? \"\").trim() || \"(the agent asked for help but gave no question)\";\n const callId: string = m?.call?.id ?? (await db.latestCall(tenant))?.id ?? \"unknown\";\n console.log(\"tool ask_operator:\", tenant, toolCallId, question.slice(0, 160));\n\n // Hardening: only accept a tool call for a tenant that actually has a live call.\n // The tenant path is already unguessable; this blunts injecting fake escalations\n // outside an active call window.\n const liveCall = await db.getCall(callId);\n const ACTIVE_T = [\"starting\", \"queued\", \"ringing\", \"in-progress\", \"forwarding\"];\n if (!liveCall || !ACTIVE_T.includes(liveCall.status)) {\n console.log(\"tool: no active call — ignoring\", tenant, callId, liveCall?.status ?? \"none\");\n return c.json({ results: [{ toolCallId, result: \"No active call right now — ignoring.\" }] });\n }\n\n await db.insertEscalation(tenant, callId, toolCallId, question);\n await db.addEvent(tenant, callId, \"escalation\", \"system\", question);\n\n // ASYNC: acknowledge immediately so the agent doesn't go on hold. The operator's\n // real answer is pushed into the live call later via provide_answer -> add-message.\n return c.json({\n results: [{\n toolCallId,\n result:\n \"Sent to your operator. Do NOT wait on hold — keep the conversation going with the human about anything else. Their answer will be delivered into our conversation shortly; when it arrives, naturally tell the human you just heard back, then relay it.\",\n }],\n });\n});\n\n// ---------- landing + live feed ----------\nfunction landing(origin: string): string {\n return `dispatch-my-human-escape — autonomous voice agent with a phone-home escape hatch (remote MCP server)\n\nDispatch an autonomous voice agent to call your human and run the whole call\nitself — WITH an escape hatch: when the human asks something it wasn't briefed\non, the agent phones YOU (the operator) live, keeps chatting while it waits, and\nrelays your answer when it lands. You brief it once; it talks, escalates if it\nneeds to, hangs up, and you collect a structured report.\n\nTools: dispatch_call · await_report · provide_answer · listen · say · get_status · end_call.\nLoop: dispatch_call → await_report (repeat). await_report returns either\nneeds_answer:true (reply with provide_answer, then await_report again) or\ndone:true with the report. Keep polling await_report for the whole call.\n\nBring your own keys from https://dashboard.vapi.ai (private key + phone number ID).\nBrain: your Vapi account's bundled OpenAI model (gpt-4o default; override with\n&model=). Voice: Vapi-native Elliot. No extra LLM key needed.\n\nConnect from Claude Code (or any MCP client / claude.ai connector):\n\n claude mcp add --transport http dispatch-escape \\\\\n \"${origin}/mcp?vapi_key=YOUR_KEY&phone_number_id=YOUR_PHONE_ID&human_number=%2B15551234567\"\n\nNo MCP client? The same tools speak plain REST with the same query params:\n POST ${origin}/api/call/dispatch {\"objective\": \"...\", \"context\": \"...\", \"questions\": [\"...\"]}\n POST ${origin}/api/call/report {\"wait_seconds\": 25} (long-polls; 35s timeout; repeat until done:true)\n POST ${origin}/api/call/answer {\"text\": \"...\"} (answer an escalation when needs_answer:true)\n POST ${origin}/api/call/listen {\"wait_seconds\": 25} (optional: eavesdrop live)\n POST ${origin}/api/call/say {\"text\": \"...\", \"end_call_after\": false} (optional: barge in)\n POST ${origin}/api/call/status · POST ${origin}/api/call/end\n\nNotes:\n • human_number is the default number dispatch_call dials — your cell. The +\n MUST be URL-encoded as %2B. Bearer auth (Authorization: Bearer ) also works.\n • The operator must keep calling await_report for the whole call — if you stop,\n the human's escalated questions never get answered.\n • Watch a call live: dispatch_call returns a watch_url (a bearer link — don't\n share it for a sensitive call).\n • Privacy: your key is read per-request and never stored; transcripts/reports\n ARE stored in this val's SQLite, scoped to a hash of your key. Want full\n custody? Remix this val — zero config. See the README for the full security note.\n • Free Vapi numbers are flaky (dead bridges, a daily outbound limit, narrowband\n audio). Import a Twilio number for reliability.\n\nSiblings: dcm31/call-my-human-no-middle-agent (puppet — you drive every word), dcm31/call-my-human (autonomous, no escape hatch).\nSource + README: https://www.val.town/x/dcm31/dispatch-my-human-escape\n`;\n}\n\nconst PAGE = `\n\n\ndispatch-my-human — live\n\n\n

📞 dispatch-my-human no call

\n\n`;\n\napp.get(\"/\", (c) => {\n if (c.req.query(\"t\")) return c.html(PAGE);\n return c.text(landing(new URL(c.req.url).origin));\n});\n\nexport default app.fetch;\n","// dispatch-my-human — a PUBLIC remote MCP server that dispatches an autonomous\n// voice agent to phone your human, handle the conversation itself, and report back.\n// Unlike the puppet sibling (call-my-human-no-middle-agent), the Vapi agent here has a REAL brain:\n// it runs the whole call in-stack (low latency, no per-turn round-trip), then Vapi's\n// post-call analysis returns a structured report.\n// BYOK: connecting users pass their own Vapi creds in the connection URL.\n// No env vars, no server-side keys, no signup.\n//\n// /mcp?vapi_key=…&phone_number_id=…&human_number=%2B1555… ← connect here\n// /api/call/:action same tools as REST (dispatch, report, listen, say, status, end)\n// /webhook/:tenant Vapi server events → SQLite (transcripts + end-of-call analysis)\n// / plain GET = setup instructions; /?t= = live transcript feed\n//\n// A tenant is a short hash of the caller's Vapi key — it scopes call state per user\n// and routes Vapi's webhooks back to the right feed. Keys are never stored.\n\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./db.ts\";\nimport { handleMcp } from \"./mcp.ts\";\nimport { type Ctx, runTool } from \"./tools.ts\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nasync function tenantOf(key: string): Promise {\n // Full SHA-256 (not truncated). The tenant is internal-only — it scopes a user's\n // calls and routes webhooks; it's never a capability token and never in a URL.\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(key));\n return [...new Uint8Array(d)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function buildCtx(c: any): Promise {\n const q = (k: string) => c.req.query(k) || null;\n const bearer = (c.req.header(\"authorization\") ?? \"\").replace(/^Bearer\\s+/i, \"\") || null;\n const vapiKey = q(\"vapi_key\") ?? bearer;\n return {\n origin: new URL(c.req.url).origin,\n vapiKey,\n phoneNumberId: q(\"phone_number_id\"),\n humanNumber: q(\"human_number\"),\n model: q(\"model\") || \"gpt-4o\", // the agent's brain; override with &model= in the URL\n tenant: vapiKey ? await tenantOf(vapiKey) : null,\n };\n}\n\n// ---------- remote MCP ----------\napp.all(\"/mcp\", async (c) => handleMcp(c.req.raw, await buildCtx(c)));\n\n// ---------- REST mirror of the tools ----------\nconst REST: Record = {\n dispatch: \"dispatch_call\",\n report: \"await_report\",\n answer: \"provide_answer\",\n listen: \"listen\",\n say: \"say\",\n status: \"get_status\",\n end: \"end_call\",\n};\n\napp.all(\"/api/call/:action\", async (c) => {\n const tool = REST[c.req.param(\"action\")];\n if (!tool) return c.json({ error: \"unknown action — use dispatch | report | answer | listen | say | status | end\" }, 404);\n let args: Record = {};\n if (c.req.method === \"POST\") {\n try {\n args = await c.req.json();\n } catch { /* empty body is fine */ }\n }\n try {\n return c.json({ ok: true, result: await runTool(tool, args, await buildCtx(c)) });\n } catch (e) {\n return c.json({ ok: false, error: String(e) }, 400);\n }\n});\n\n// state for the live feed page (tenant id is required — it is unguessable without the key)\napp.get(\"/api/state\", async (c) => {\n const t = c.req.query(\"t\");\n if (!t) return c.json({ error: \"pass ?t= (shown in start_call/get_status results)\" }, 400);\n const call = await db.latestCall(t);\n if (!call) return c.json({ call: null, events: [] });\n const events = await db.recentEvents(call.id, 120);\n return c.json({ call, events });\n});\n\n// ---------- Vapi webhook (per tenant) ----------\napp.post(\"/webhook/:tenant\", async (c) => {\n const tenant = c.req.param(\"tenant\");\n if ((c.req.header(\"x-vapi-secret\") ?? \"\") !== tenant) {\n console.log(\"webhook: bad or missing x-vapi-secret for tenant\", tenant);\n return c.json({ error: \"bad secret\" }, 401);\n }\n const payload = await c.req.json().catch(() => ({}));\n const m = payload?.message ?? {};\n const callId: string = m?.call?.id ?? (await db.latestCall(tenant))?.id ?? \"unknown\";\n console.log(\"webhook:\", tenant, m.type, m.status ?? m.transcriptType ?? \"\", String(m.transcript ?? \"\").slice(0, 120));\n\n const mtype = String(m.type ?? \"\");\n if (mtype.startsWith(\"transcript\")) {\n // type is \"transcript\" or the documented variant 'transcript[transcriptType=\"final\"]'\n const ttype = m.transcriptType ?? (mtype.includes(\"final\") ? \"final\" : \"partial\");\n if (ttype === \"final\") {\n await db.addEvent(tenant, callId, \"transcript\", m.role ?? \"user\", m.transcript ?? \"\");\n await db.setPartial(callId, null);\n } else {\n await db.setPartial(callId, (m.role ?? \"?\") + \": \" + (m.transcript ?? \"\"));\n }\n } else if (mtype === \"conversation-update\") {\n // Fallback transcript source: backfill any user lines the transcript events missed.\n const conv = (m.conversation ?? m.messages ?? []) as Array>;\n const users = conv\n .filter((x) => x.role === \"user\")\n .map((x) => String(x.message ?? x.content ?? \"\"))\n .filter(Boolean);\n if (users.length) {\n const seen = new Set(\n (await db.recentEvents(callId, 80))\n .filter((e) => e.type === \"transcript\" && e.role === \"user\")\n .map((e) => e.content),\n );\n for (const u of users) {\n if (!seen.has(u)) {\n await db.addEvent(tenant, callId, \"transcript\", \"user\", u);\n seen.add(u);\n }\n }\n }\n } else if (mtype === \"status-update\") {\n await db.setCallStatus(callId, m.status ?? \"unknown\", m.endedReason ?? null);\n await db.addEvent(tenant, callId, \"status\", \"system\", String(m.status) + (m.endedReason ? \" (\" + m.endedReason + \")\" : \"\"));\n } else if (mtype === \"end-of-call-report\") {\n // Analysis (summary + structuredData) is computed at end-of-call and rides\n // along in this report. await_report waits for the \"analysis\" event below.\n await db.setCallStatus(callId, \"ended\", m.endedReason ?? null);\n const analysis = m?.analysis ?? {};\n const summary = analysis.summary ?? m.summary ?? \"call ended\";\n await db.addEvent(tenant, callId, \"report\", \"system\", String(summary).slice(0, 1000));\n if (analysis.structuredData !== undefined && analysis.structuredData !== null) {\n await db.addEvent(tenant, callId, \"analysis\", \"system\", JSON.stringify(analysis.structuredData));\n }\n }\n return c.json({});\n});\n\n// ---------- escape hatch: async tool endpoint (per tenant) ----------\n// The agent calls ask_operator; Vapi POSTs here. We record the question and return\n// immediately (no hold) so the agent keeps talking. The operator's answer is pushed\n// into the live call later via provide_answer -> add-message.\napp.post(\"/tool/:tenant\", async (c) => {\n const tenant = c.req.param(\"tenant\");\n const secret = c.req.header(\"x-vapi-secret\") ?? \"\";\n if (secret && secret !== tenant) {\n console.log(\"tool: bad x-vapi-secret for tenant\", tenant);\n return c.json({ error: \"bad secret\" }, 401);\n }\n const payload = await c.req.json().catch(() => ({}));\n const m = payload?.message ?? {};\n const tc = (m.toolCallList ?? [])[0] ?? {};\n const toolCallId: string = tc.id ?? tc.toolCall?.id ?? \"unknown\";\n // Vapi may send arguments as an object OR a JSON string, and under .arguments\n // or .function.arguments depending on shape — handle all of them.\n let rawArgs: unknown = tc.arguments ?? tc.function?.arguments ?? tc.toolCall?.function?.arguments ?? {};\n if (typeof rawArgs === \"string\") {\n try { rawArgs = JSON.parse(rawArgs); } catch { rawArgs = {}; }\n }\n const a = (rawArgs ?? {}) as Record;\n const question = String(a.question ?? a.q ?? \"\").trim() || \"(the agent asked for help but gave no question)\";\n const callId: string = m?.call?.id ?? (await db.latestCall(tenant))?.id ?? \"unknown\";\n console.log(\"tool ask_operator:\", tenant, toolCallId, question.slice(0, 160));\n\n // Hardening: only accept a tool call for a tenant that actually has a live call.\n // The tenant path is already unguessable; this blunts injecting fake escalations\n // outside an active call window.\n const liveCall = await db.getCall(callId);\n const ACTIVE_T = [\"starting\", \"queued\", \"ringing\", \"in-progress\", \"forwarding\"];\n if (!liveCall || !ACTIVE_T.includes(liveCall.status)) {\n console.log(\"tool: no active call — ignoring\", tenant, callId, liveCall?.status ?? \"none\");\n return c.json({ results: [{ toolCallId, result: \"No active call right now — ignoring.\" }] });\n }\n\n await db.insertEscalation(tenant, callId, toolCallId, question);\n await db.addEvent(tenant, callId, \"escalation\", \"system\", question);\n\n // ASYNC: acknowledge immediately so the agent doesn't go on hold. The operator's\n // real answer is pushed into the live call later via provide_answer -> add-message.\n return c.json({\n results: [{\n toolCallId,\n result:\n \"Sent to your operator. Do NOT wait on hold — keep the conversation going with the human about anything else. Their answer will be delivered into our conversation shortly; when it arrives, naturally tell the human you just heard back, then relay it.\",\n }],\n });\n});\n\n// ---------- landing + live feed ----------\nfunction landing(origin: string): string {\n return `dispatch-my-human-escape — autonomous voice agent with a phone-home escape hatch (remote MCP server)\n\nDispatch an autonomous voice agent to call your human and run the whole call\nitself — WITH an escape hatch: when the human asks something it wasn't briefed\non, the agent phones YOU (the operator) live, keeps chatting while it waits, and\nrelays your answer when it lands. You brief it once; it talks, escalates if it\nneeds to, hangs up, and you collect a structured report.\n\nTools: dispatch_call · await_report · provide_answer · listen · say · get_status · end_call.\nLoop: dispatch_call → await_report (repeat). await_report returns either\nneeds_answer:true (reply with provide_answer, then await_report again) or\ndone:true with the report. Keep polling await_report for the whole call.\n\nBring your own keys from https://dashboard.vapi.ai (private key + phone number ID).\nBrain: your Vapi account's bundled OpenAI model (gpt-4o default; override with\n&model=). Voice: Vapi-native Elliot. No extra LLM key needed.\n\nConnect from Claude Code (or any MCP client / claude.ai connector):\n\n claude mcp add --transport http dispatch-escape \\\\\n \"${origin}/mcp?vapi_key=YOUR_KEY&phone_number_id=YOUR_PHONE_ID&human_number=%2B15551234567\"\n\nNo MCP client? The same tools speak plain REST with the same query params:\n POST ${origin}/api/call/dispatch {\"objective\": \"...\", \"context\": \"...\", \"questions\": [\"...\"]}\n POST ${origin}/api/call/report {\"wait_seconds\": 25} (long-polls; 35s timeout; repeat until done:true)\n POST ${origin}/api/call/answer {\"text\": \"...\"} (answer an escalation when needs_answer:true)\n POST ${origin}/api/call/listen {\"wait_seconds\": 25} (optional: eavesdrop live)\n POST ${origin}/api/call/say {\"text\": \"...\", \"end_call_after\": false} (optional: barge in)\n POST ${origin}/api/call/status · POST ${origin}/api/call/end\n\nNotes:\n • human_number is the default number dispatch_call dials — your cell. The +\n MUST be URL-encoded as %2B. Bearer auth (Authorization: Bearer ) also works.\n • The operator must keep calling await_report for the whole call — if you stop,\n the human's escalated questions never get answered.\n • Watch a call live: dispatch_call returns a watch_url (a bearer link — don't\n share it for a sensitive call).\n • Privacy: your key is read per-request and never stored; transcripts/reports\n ARE stored in this val's SQLite, scoped to a hash of your key. Want full\n custody? Remix this val — zero config. See the README for the full security note.\n • Free Vapi numbers are flaky (dead bridges, a daily outbound limit, narrowband\n audio). Import a Twilio number for reliability.\n\nSiblings: dcm31/call-my-human-no-middle-agent (puppet — you drive every word), dcm31/call-my-human (autonomous, no escape hatch).\nSource + README: https://www.val.town/x/dcm31/dispatch-my-human-escape\n`;\n}\n\nconst PAGE = `\n\n\ndispatch-my-human — live\n\n\n

📞 dispatch-my-human no call

\n\n`;\n\napp.get(\"/\", (c) => {\n if (c.req.query(\"t\")) return c.html(PAGE);\n return c.text(landing(new URL(c.req.url).origin));\n});\n\nexport default app.fetch;\n","createdAt",["D",1782163623726],"branchVersion","branchId","4026f5ac-92f0-434e-a27e-bfda61871df5","id","f8ce04b7-1471-4c48-8b9d-3105b5ad1b75","dispatch-my-human-escape",["D",1781486817181],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Public remote MCP: your agent phones you. BYO Vapi keys, no env.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/e638c970-aa12-42a0-ac97-631720749000/square512?exp=1789534799&sig=179f61c1a9675cc9cd019b16ef4ede866000a64584aa6ba2535c5f001a601ca2","9319c175-2593-4f88-ba21-04f2ef7b1c28","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","d663a026-6449-42f6-9156-1d4a2d64d38c","tursoName","f8ce04b714714c488b9d3105b5ad1b75","tursoHostname","f8ce04b714714c488b9d3105b5ad1b75-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789509672838],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_111":107},"org",{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":93,"_94":95,"_96":50,"_97":98,"_99":65,"_100":45,"_101":102},"isOwned",73,"main","projectId","forkedBranchId","92e76f90-1592-4578-85fb-c1f07e0fb37e","forkedBranchVersion",23,"forkedProjectPrivacy","forkedProjectId","115c4677-1932-4e3d-a81a-e71d5939f255","forkedProjectOrgId","projectName","userHandle","dcm31","handle","displayName","Charlie","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3e904faa-3764-4629-c475-f561a49b0000/square512?exp=1789534799&sig=84fd3b9bd0306e7b3250b5958bebdf15bd4b124cb792456b57c457068a44b463","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":235,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":31,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":236,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":237,"_84":238,"_86":239,"_88":25},"tree",[210,211,212,213,214,215],"files",[210,211,212,213,214,215],"counts",{"_199":63,"_200":196,"_201":63,"_202":203,"_204":205},"contents",[145,146,147,148,149,150],"upstreamProject",{"_43":98,"_32":142,"_52":143,"_54":113,"_49":50,"_82":144},"upstreamBranch",{"_43":93,"_38":136,"_137":138,"_32":90,"_91":98,"_13":139,"_92":-5,"_94":-5,"_140":141,"_47":-5,"_88":25,"_49":50,"_101":102,"_64":65,"_100":142},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781481349040],"updatedAt",["D",1782228447611],98,"lockfileKey","1782228447712-esm.town_v_dcm31_call-my-human@98-main","call-my-human","Public remote MCP: your agent phones you. BYO Vapi keys",{"_103":102,"_111":107},{"_43":191,"_32":192,"_30":193,"_154":-5,"_41":42,"_40":194,"_156":59,"_38":195,"_13":196,"_33":20,"_35":197,"_24":25,"_161":-5,"_27":198},{"_43":183,"_32":184,"_30":185,"_154":-5,"_41":42,"_40":186,"_156":59,"_38":187,"_13":188,"_33":159,"_35":189,"_24":25,"_161":-5,"_27":190},{"_43":179,"_32":28,"_30":31,"_154":-5,"_41":42,"_40":14,"_156":25,"_38":180,"_13":181,"_33":34,"_35":37,"_24":25,"_161":-5,"_27":182},{"_43":171,"_32":172,"_30":173,"_154":-5,"_41":42,"_40":174,"_156":59,"_38":175,"_13":176,"_33":159,"_35":177,"_24":25,"_161":-5,"_27":178},{"_43":163,"_32":164,"_30":165,"_154":-5,"_41":42,"_40":166,"_156":25,"_38":167,"_13":168,"_33":159,"_35":169,"_24":25,"_161":-5,"_27":170},{"_43":151,"_32":152,"_30":153,"_154":-5,"_41":42,"_40":155,"_156":25,"_38":157,"_13":158,"_33":159,"_35":160,"_24":25,"_161":-5,"_27":162},"3d6ec2c4-218a-45fd-8068-89089898acf5","vapi.ts","019ec8e3-8fe9-75a2-9f23-f5bf6aa88136","parentId",45,"latest",["D",1782163559821],10,"script","// Thin Vapi REST client — BYOK: every function takes the caller's own key.\n// Nothing is read from env; this is a public multi-tenant server.\n//\n// dispatch-my-human DOES use Vapi's own LLM brain (native model), unlike the\n// puppet sibling call-my-human-no-middle-agent whose custom-llm always returned \"\". The agent\n// runs the whole conversation itself for low latency, then Vapi's analysis\n// produces a structured report we hand back to the dispatcher.\n\nconst VAPI_BASE = \"https://api.vapi.ai\";\n\nexport interface DispatchOpts {\n vapiKey: string;\n phoneNumberId: string;\n number: string;\n firstMessage: string;\n systemPrompt: string;\n questions: string[];\n model: string; // e.g. \"gpt-4o\"\n maxDurationSeconds: number;\n origin: string; // this val's https origin\n tenant: string; // hash of the vapi key — routes webhooks back to the right feed (in the URL path)\n webhookSecret: string; // per-call random secret Vapi echoes back as x-vapi-secret (auth, not identity)\n}\n\n// Structured report schema: objective + one answer per required question + followups.\n// The required questions are baked into the schema descriptions (not a separate\n// prompt) so the extractor always sees them — Vapi feeds it the transcript by default.\nfunction structuredSchema(questions: string[]) {\n const qList = questions.length\n ? \" The agent was told to get answers to these specific questions: \" +\n questions.map((q, i) => `(${i + 1}) ${q}`).join(\"; \") +\n \". Provide one entry per question, in that order.\"\n : \"\";\n return {\n type: \"object\",\n properties: {\n objective_met: {\n type: \"boolean\",\n description: \"True if the call accomplished its stated objective.\",\n },\n answers: {\n type: \"array\",\n description:\n \"One entry for each question the agent was asked to get answered, with the human's answer.\" + qList,\n items: {\n type: \"object\",\n properties: {\n question: { type: \"string\", description: \"The question the agent needed answered.\" },\n answer: {\n type: \"string\",\n description: \"The human's answer, paraphrased or verbatim. Use 'not answered' if never resolved.\",\n },\n },\n required: [\"question\", \"answer\"],\n },\n },\n followups: {\n type: \"string\",\n description:\n \"Anything the human raised, requested, or asked that the dispatcher should act on after the call. Empty string if none.\",\n },\n },\n required: [\"objective_met\", \"answers\"],\n };\n}\n\nexport async function createDispatchCall(opts: DispatchOpts) {\n const body = {\n phoneNumberId: opts.phoneNumberId,\n customer: { number: opts.number },\n assistant: {\n firstMessage: opts.firstMessage,\n // A REAL brain this time: Vapi runs the LLM in-stack (lowest latency, no\n // round-trip back to the dispatcher). The endCall tool lets it hang up\n // itself once the objective is met.\n model: {\n provider: \"openai\",\n model: opts.model,\n temperature: 0.6,\n messages: [{ role: \"system\", content: opts.systemPrompt }],\n tools: [\n { type: \"endCall\" },\n // The escape hatch (ASYNC). When the agent hits a question outside its\n // brief it calls this; /tool records it and returns immediately so the\n // agent keeps talking. The operator's answer is pushed into the live\n // call later via provide_answer -> add-message.\n {\n type: \"function\",\n function: {\n name: \"ask_operator\",\n description:\n \"Ask your operator (the AI assistant that dispatched you) something you cannot answer from your briefing — the MOMENT the human asks something off-brief; never guess. This is ASYNC: it returns immediately, so DON'T wait — keep the conversation going. The operator's answer arrives shortly as a message in the conversation, and you relay it then.\",\n parameters: {\n type: \"object\",\n properties: {\n question: {\n type: \"string\",\n description: \"The human's question, phrased clearly and completely for your operator.\",\n },\n },\n required: [\"question\"],\n },\n },\n // Async: /tool returns immediately, so no long hold. One quick bridge line.\n server: { url: `${opts.origin}/tool/${opts.tenant}`, secret: opts.webhookSecret, timeoutSeconds: 20 },\n messages: [\n {\n type: \"request-start\",\n content: \"Let me loop in my operator on that — I'll keep us going and share what they say the moment it lands.\",\n },\n ],\n },\n ],\n },\n // No transcriber override — use Vapi's default (what templates/vapi-phone-call\n // uses). The explicit deepgram nova-2 override added latency and produced\n // duplicated/cumulative transcript lines. Native models get a default STT.\n // Vapi-native voice — what the dashboard \"test call\" uses, tuned for telephony\n // and bundled (no extra provider key). Much better on a phone than openai/shimmer.\n voice: { provider: \"vapi\", voiceId: \"Elliot\", version: 2 },\n server: { url: `${opts.origin}/webhook/${opts.tenant}`, secret: opts.webhookSecret },\n serverMessages: [\"transcript\", \"status-update\", \"end-of-call-report\", \"conversation-update\"],\n // The human pauses to think; the agent answers immediately, so dead air\n // means a genuinely dropped/empty call — 30s is a safe cutoff.\n silenceTimeoutSeconds: 30,\n maxDurationSeconds: opts.maxDurationSeconds,\n // Auto-summarize + extract the structured report when the call ends.\n // Schema only — Vapi's default extractor prompt already receives the\n // transcript; a custom {{transcript}} message silently broke extraction.\n analysisPlan: {\n structuredDataPlan: {\n enabled: true,\n schema: structuredSchema(opts.questions),\n },\n },\n },\n };\n\n console.log(\"vapi: dispatching call →\", opts.number, \"tenant\", opts.tenant, \"model\", opts.model);\n const res = await fetch(`${VAPI_BASE}/call`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${opts.vapiKey}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n const data = await res.json();\n if (!res.ok) {\n console.log(\"vapi: dispatch FAILED\", res.status, JSON.stringify(data).slice(0, 500));\n throw new Error(`Vapi ${res.status}: ${JSON.stringify(data)}`);\n }\n console.log(\"vapi: call created\", data.id, \"controlUrl:\", data.monitor?.controlUrl ? \"present\" : \"MISSING\");\n return data as { id: string; status?: string; monitor?: { controlUrl?: string; listenUrl?: string } };\n}\n\nexport async function control(controlUrl: string, payload: Record) {\n const res = await fetch(controlUrl, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n const text = await res.text();\n console.log(\"vapi control:\", payload.type, \"→\", res.status, text.slice(0, 200));\n return { status: res.status, body: text };\n}\n\n// Optional supervisor barge-in: inject a verbatim line over the live call.\n// Docs use `content`; the SDK's SayMessage type uses `message`. Try both.\nexport async function sayOnCall(controlUrl: string, text: string, endCallAfterSpoken = false) {\n const base: Record = { type: \"say\", content: text };\n if (endCallAfterSpoken) base.endCallAfterSpoken = true;\n let r = await control(controlUrl, base);\n if (r.status >= 400) {\n const alt: Record = { type: \"say\", message: text };\n if (endCallAfterSpoken) alt.endCallAfterSpoken = true;\n r = await control(controlUrl, alt);\n }\n return r;\n}\n\nexport async function endCallOnVapi(controlUrl: string) {\n return control(controlUrl, { type: \"end-call\" });\n}\n\n// Async escape hatch: push the operator's answer into the LIVE call's conversation\n// and trigger the agent to speak. Unlike `say` (raw TTS that bypasses the brain),\n// add-message puts it in the model's context so the agent relays it in its own\n// words and stays in the loop for any follow-up.\nexport async function addMessageToCall(controlUrl: string, content: string, role = \"system\") {\n return control(controlUrl, {\n type: \"add-message\",\n message: { role, content },\n triggerResponseEnabled: true,\n });\n}\n\nexport async function getCallLive(vapiKey: string, callId: string) {\n const res = await fetch(`${VAPI_BASE}/call/${callId}`, {\n headers: { Authorization: `Bearer ${vapiKey}` },\n });\n const data = await res.json();\n if (!res.ok) throw new Error(`Vapi GET /call ${res.status}: ${JSON.stringify(data).slice(0, 300)}`);\n return data;\n}\n","label",[152],"5cebd222-b8a2-4250-9fd5-8c50d601c266","tools.ts","019ec8e3-8fe9-75a2-9f23-f028055f3b06",48,["D",1782163579075],13,"// The tools, defined once and exposed twice: over MCP (/mcp) and REST (/api/call/*).\n// All config arrives per-request (BYOK) via ctx — built in main.ts from the\n// connection URL's query params. Nothing comes from env.\n//\n// Unlike the puppet sibling (call-my-human-no-middle-agent), here the Vapi agent has a REAL\n// brain and runs the whole conversation itself. Primary loop:\n// dispatch_call → hand off a brief + objective + questions\n// await_report → long-poll until it hangs up, get the structured result\n// listen / say are optional supervisor hooks (eavesdrop / barge in).\n\nimport * as db from \"./db.ts\";\nimport { addMessageToCall, createDispatchCall, endCallOnVapi, getCallLive, sayOnCall } from \"./vapi.ts\";\n\nexport interface Ctx {\n origin: string;\n vapiKey: string | null;\n phoneNumberId: string | null;\n humanNumber: string | null;\n model: string; // LLM the agent's brain runs on (default gpt-4o)\n tenant: string | null; // short hash of vapiKey\n}\n\nconst CONNECT_HELP =\n \"Missing Vapi credentials. Put them in your MCP connection URL: /mcp?vapi_key=&phone_number_id=&human_number=%2B15551234567 (the + must be URL-encoded as %2B). Get the key and phone number at dashboard.vapi.ai.\";\n\nfunction creds(ctx: Ctx): { vapiKey: string; tenant: string } {\n if (!ctx.vapiKey || !ctx.tenant) throw new Error(CONNECT_HELP);\n return { vapiKey: ctx.vapiKey, tenant: ctx.tenant };\n}\n\nconst ACTIVE = [\"starting\", \"queued\", \"ringing\", \"in-progress\", \"forwarding\"];\n\nasync function requireActiveCall(tenant: string): Promise {\n const call = await db.latestCall(tenant);\n if (!call) throw new Error(\"No call yet — use dispatch_call first.\");\n if (!ACTIVE.includes(call.status)) {\n throw new Error(\n `Latest call ${call.id} is '${call.status}'${call.ended_reason ? ` (${call.ended_reason})` : \"\"} — start a new one with dispatch_call.`,\n );\n }\n return call;\n}\n\nconst fmt = (e: db.EventRow) => ({\n t: e.created_at.slice(11, 19),\n type: e.type,\n role: e.role,\n content: e.content,\n});\n\n// Build the agent's system prompt from the dispatch brief. This IS the brain —\n// it carries the whole call, so be explicit about who it is and what \"done\" means.\nfunction buildSystemPrompt(opts: {\n objective: string;\n context: string;\n questions: string[];\n callerIdentity: string;\n maxMinutes: number;\n}): string {\n const qBlock = opts.questions.length\n ? \"Before you hang up, get a clear answer to EACH of these:\\n\" +\n opts.questions.map((q, i) => ` ${i + 1}. ${q}`).join(\"\\n\")\n : \"There are no specific required questions beyond the objective above.\";\n const ctxBlock = opts.context.trim()\n ? `Context you've been briefed with (use it; don't read it aloud verbatim):\\n${opts.context.trim()}`\n : \"You have not been given extra context beyond the objective.\";\n\n return `You are ${opts.callerIdentity}. You are placing an OUTBOUND phone call to a person on behalf of your operator (the AI assistant / system that dispatched you), who is busy and needs something from them. You called THEM — you are not their assistant waiting for requests.\n\nYOUR OBJECTIVE:\n${opts.objective.trim()}\n\n${ctxBlock}\n\n${qBlock}\n\nHOW TO TALK:\n- Sound like a real person on the phone: short, natural sentences, one idea at a time. No monologues.\n- Open by quickly saying who you are and why you're calling, then get to the point.\n- Listen and react to what they actually say. Don't plow through a script.\n- If it's a bad time, offer to have your operator follow up later, then wrap up.\n\nIF THEY ASK SOMETHING OUTSIDE YOUR BRIEF:\n- Do NOT guess, improvise, or make something up. The moment the human asks something your objective and context don't clearly cover, call the ask_operator function with their exact question.\n- This is ASYNC — you do NOT wait on hold. After sending the question you don't have to fill the air: it's perfectly fine to just say you're checking and sit with a short, comfortable pause, OR pick the conversation back up naturally if there's something real to say. Don't force small talk.\n- Your operator's answer will arrive a little later as a \"[Message from your operator]\" in the conversation. The moment it appears, naturally tell the human \"oh — I just heard back from my operator,\" relay the answer in your own words, then continue.\n- You can have more than one question out at once. Use this only for genuine gaps you can't fill from your briefing.\n\nWHEN YOU'RE DONE:\n- NEVER end the call while the human is still talking or mid-thought. Wait for a clear, complete answer and a natural pause.\n- Only after you have answers to ALL the required questions (or they say they have to go) should you wrap up. First ask \"anything else before I let you go?\" — if they're still talking, keep listening; do not hang up.\n- Then briefly confirm what you heard, thank them, and use the endCall function.\n- Keep the whole call under ${opts.maxMinutes} minutes, but getting complete answers matters more than speed — don't rush them off.`;\n}\n\nexport const TOOLS = [\n {\n name: \"dispatch_call\",\n description:\n \"Dispatch a voice agent to phone your human and handle a conversation autonomously, then hang up. UNLIKE a puppet, this agent has a real brain: you hand it a brief once and it carries the whole call itself with low latency — you do NOT drive it turn by turn. Give it a clear `objective`, any `context` it needs, and the specific `questions` you want answered. After it returns, call `await_report` to block until the call ends and collect the structured result (summary + per-question answers + followups). For most check-ins this is the only tool you need besides await_report.\",\n inputSchema: {\n type: \"object\",\n properties: {\n objective: {\n type: \"string\",\n description: \"The goal of the call in plain language, e.g. 'Confirm whether we should ship the release tonight or wait for QA.'\",\n },\n context: {\n type: \"string\",\n description: \"Everything the agent should know to handle the call well — the situation, relevant facts, constraints. Dump freely; it won't read it aloud.\",\n },\n questions: {\n type: \"array\",\n items: { type: \"string\" },\n description: \"Specific questions you need answered. Each becomes a field in the returned report.\",\n },\n number: {\n type: \"string\",\n description: \"E.164 number to dial, e.g. +15551234567. Defaults to the human_number from your connection URL.\",\n },\n first_message: {\n type: \"string\",\n description: \"The exact opening line the agent speaks on pickup. Optional — a sensible default is used.\",\n },\n caller_identity: {\n type: \"string\",\n description: \"Who the agent should present as, e.g. 'Charlie's AI assistant'. Optional.\",\n },\n max_minutes: {\n type: \"number\",\n description: \"Hard cap on call length in minutes (default 10).\",\n },\n },\n required: [\"objective\"],\n },\n run: async (args: Record, ctx: Ctx) => {\n const { vapiKey, tenant } = creds(ctx);\n const phoneNumberId = ctx.phoneNumberId || String(args.phone_number_id || \"\");\n if (!phoneNumberId) {\n throw new Error(\"phone_number_id missing — add &phone_number_id= to your connection URL.\");\n }\n const prev = await db.latestCall(tenant);\n if (prev && ACTIVE.includes(prev.status)) {\n let stillActive = false;\n try {\n const live = await getCallLive(vapiKey, prev.id);\n if (live.status && live.status !== prev.status) {\n await db.setCallStatus(prev.id, live.status, live.endedReason ?? null);\n }\n stillActive = ACTIVE.includes(live.status);\n } catch (e) {\n console.log(\"dispatch_call: live status check failed, allowing new call:\", String(e).slice(0, 120));\n }\n if (stillActive) throw new Error(`Call ${prev.id} is still active — end_call it first.`);\n }\n const number = String(args.number || ctx.humanNumber || \"\");\n if (!number) {\n throw new Error(\n \"No number to dial — pass `number`, or add &human_number=%2B15551234567 to your connection URL.\",\n );\n }\n const objective = String(args.objective || \"\").trim();\n if (!objective) throw new Error(\"`objective` is required — tell the agent what the call is for.\");\n const context = String(args.context || \"\");\n const questions = Array.isArray(args.questions) ? args.questions.map(String).filter(Boolean) : [];\n const callerIdentity = String(args.caller_identity || \"an AI voice assistant\");\n const maxMinutes = Math.min(Math.max(Number(args.max_minutes ?? 10), 1), 15);\n const firstMessage = String(\n args.first_message ||\n \"Hi! This is your AI assistant calling — I've got a quick thing to run by you, do you have a sec?\",\n );\n const systemPrompt = buildSystemPrompt({ objective, context, questions, callerIdentity, maxMinutes });\n\n // Per-call random secrets: the webhook secret authenticates Vapi's inbound\n // events and the agent's ask_operator tool calls; the watch token is a\n // single-call bearer capability for the live feed. Neither is the tenant —\n // so leaking one watch link exposes one call, not your account.\n const webhookSecret = db.randomToken();\n const watchToken = db.randomToken();\n\n const call = await createDispatchCall({\n vapiKey,\n phoneNumberId,\n number,\n firstMessage,\n systemPrompt,\n questions,\n model: ctx.model,\n maxDurationSeconds: maxMinutes * 60,\n origin: ctx.origin,\n tenant,\n webhookSecret,\n });\n const controlUrl = call.monitor?.controlUrl ?? \"\";\n await db.insertCall(tenant, call.id, controlUrl, number, watchToken, webhookSecret);\n await db.addEvent(tenant, call.id, \"status\", \"system\", `dispatching ${number} · objective: ${objective.slice(0, 120)}`);\n return {\n call_id: call.id,\n status: call.status ?? \"queued\",\n dialing: number,\n questions_tracked: questions.length,\n watch_url: `${ctx.origin}/?c=${call.id}&k=${watchToken}`,\n next:\n \"Call `await_report` now and keep calling it. It returns either needs_answer:true (the agent hit an off-brief question — reply with `provide_answer`, then await_report again) or done:true with the summary + answers. Optional: `listen` / `say` to eavesdrop or barge in.\",\n };\n },\n },\n {\n name: \"await_report\",\n description:\n \"Block until the dispatched call finishes, then return the structured outcome: a summary, an answer to each question you asked, anything the human raised for follow-up, and the full transcript. Long-polls up to wait_seconds — keep calling it (it's cheap) until you get done:true. While done:false the call is still in progress or the post-call analysis is still being written.\",\n inputSchema: {\n type: \"object\",\n properties: {\n wait_seconds: { type: \"number\", description: \"Max seconds to long-poll this call (1-25, default 20).\" },\n },\n },\n run: async (args: Record, ctx: Ctx) => {\n const { vapiKey, tenant } = creds(ctx);\n const call = await db.latestCall(tenant);\n if (!call) throw new Error(\"No call yet — use dispatch_call first.\");\n const wait = Math.min(Math.max(Number(args.wait_seconds ?? 20), 1), 25);\n const deadline = Date.now() + wait * 1000;\n\n const buildReport = async (status: string, endedReason: string | null) => {\n const analysis = await db.latestEventOfType(call.id, \"analysis\");\n const summaryEv = await db.latestEventOfType(call.id, \"report\");\n let structured: Record | null = null;\n if (analysis?.content) {\n try {\n structured = JSON.parse(analysis.content);\n } catch { /* leave null */ }\n }\n const transcript = (await db.transcriptLines(call.id)).map((e) => ({ role: e.role, text: e.content }));\n return {\n done: true,\n call_status: status,\n ended_reason: endedReason,\n summary: summaryEv?.content ?? null,\n objective_met: structured?.objective_met ?? null,\n answers: structured?.answers ?? null,\n followups: structured?.followups ?? null,\n transcript,\n ...(structured ? {} : { note: \"Call ended but structured analysis isn't ready yet — call await_report once more in a few seconds.\" }),\n };\n };\n\n while (true) {\n // Escape hatch: if the agent is waiting on YOU for an off-brief question,\n // surface it immediately so you can provide_answer.\n const esc = await db.pendingEscalation(tenant);\n if (esc) {\n const escCall = await db.getCall(esc.call_id);\n if (escCall && !ACTIVE.includes(escCall.status)) {\n // The call ended before this got answered — expire it so it stops surfacing.\n await db.expirePendingEscalations(esc.call_id);\n } else {\n return {\n done: false,\n needs_answer: true,\n escalation: { id: esc.id, question: esc.question },\n note:\n \"The agent hit a question outside its brief and is waiting on YOU. Answer it with provide_answer({ text }) — it will relay your answer to the human — then call await_report again.\",\n };\n }\n }\n let current = await db.getCall(call.id);\n const terminal = current && !ACTIVE.includes(current.status);\n // Done = call ended AND the post-call analysis has landed (or we've waited it out).\n if (terminal) {\n const analysis = await db.latestEventOfType(call.id, \"analysis\");\n if (analysis) return await buildReport(current!.status, current!.ended_reason);\n }\n if (Date.now() > deadline) {\n // Sync from Vapi in case a webhook was missed.\n try {\n const live = await getCallLive(vapiKey, call.id);\n if (live?.status && live.status !== current?.status) {\n await db.setCallStatus(call.id, String(live.status), (live.endedReason as string) ?? null);\n current = await db.getCall(call.id);\n }\n } catch (e) {\n console.log(\"await_report: live status check failed:\", String(e).slice(0, 120));\n }\n const stillTerminal = current && !ACTIVE.includes(current.status);\n if (stillTerminal) return await buildReport(current!.status, current!.ended_reason);\n // Bridge self-test: a healthy connected call produces SOME transcript within\n // ~40s (even the agent's own speech echoes back). Zero = dead/one-way audio\n // bridge, or it rang out to voicemail.\n const ageMs = Date.now() - Date.parse(call.created_at);\n if (current?.status === \"in-progress\" && ageMs > 40_000 && !(await db.hasTranscript(call.id))) {\n return {\n done: false,\n call_status: current.status,\n note:\n \"WARNING: connected but ZERO transcripts after 40s — not even the agent's own speech. Likely a dead/one-way audio bridge or voicemail (common on free Vapi numbers). end_call, wait ~10s, and dispatch again; if it persists, import a Twilio number into Vapi.\",\n };\n }\n return {\n done: false,\n call_status: current?.status ?? \"unknown\",\n ...(current?.live_partial ? { hearing_now: current.live_partial } : {}),\n note: \"Call still in progress — call await_report again to keep waiting.\",\n };\n }\n await new Promise((r) => setTimeout(r, 1000));\n }\n },\n },\n {\n name: \"provide_answer\",\n description:\n \"Answer a question the agent escalated to you mid-call (when await_report returns needs_answer:true). Your text is handed back to the agent as the result of its ask_operator call, and it relays it to the human in its own words. Keep it brief and factual — it will be spoken aloud. After answering, call await_report again to keep waiting for the report or the next question.\",\n inputSchema: {\n type: \"object\",\n properties: {\n text: {\n type: \"string\",\n description: \"The answer to relay, in plain language. It's spoken to the human, so keep it concise.\",\n },\n },\n required: [\"text\"],\n },\n run: async (args: Record, ctx: Ctx) => {\n const { tenant } = creds(ctx);\n const esc = await db.pendingEscalation(tenant);\n if (!esc) {\n throw new Error(\"No pending question from the agent right now — call await_report to see if it asks one.\");\n }\n const text = String(args.text ?? \"\").trim();\n if (!text) throw new Error(\"`text` is required — provide the answer to relay to the human.\");\n const call = await db.getCall(esc.call_id);\n if (!call?.control_url) {\n throw new Error(\"No control URL for this call — can't deliver the answer into the live call.\");\n }\n // Push the answer into the live conversation; triggerResponse makes the agent\n // announce it (\"just heard back from my operator...\") and relay it in its words.\n const inject =\n `[Message from your operator] About the human's question \"${esc.question}\": ${text}\\n\\n` +\n \"Now tell the human you just heard back from your operator and relay this naturally in your own words, then carry on.\";\n const r = await addMessageToCall(call.control_url, inject);\n await db.answerEscalation(esc.id, text);\n await db.addEvent(tenant, esc.call_id, \"answer\", \"assistant\", text);\n if (r.status >= 400) {\n throw new Error(`Vapi add-message rejected (${r.status}): ${r.body.slice(0, 200)}`);\n }\n return { ok: true, answered: esc.question, next: \"Delivered into the live call — the agent will announce it. Call await_report again to continue.\" };\n },\n },\n {\n name: \"listen\",\n description:\n \"Optional: eavesdrop on a live dispatched call. Long-polls for new events (the human's speech, the agent's lines, status changes) up to wait_seconds. Use this if you want to watch the conversation unfold in realtime; you do NOT need it for the normal dispatch→await_report flow.\",\n inputSchema: {\n type: \"object\",\n properties: {\n wait_seconds: { type: \"number\", description: \"Max seconds to wait (1-25, default 20).\" },\n },\n },\n run: async (args: Record, ctx: Ctx) => {\n const { vapiKey, tenant } = creds(ctx);\n const call = await db.latestCall(tenant);\n if (!call) throw new Error(\"No call yet — use dispatch_call first.\");\n const wait = Math.min(Math.max(Number(args.wait_seconds ?? 20), 1), 25);\n const deadline = Date.now() + wait * 1000;\n let cursor = call.cursor;\n while (true) {\n const events = await db.eventsAfter(call.id, cursor);\n const maxId = events.length ? events[events.length - 1].id : cursor;\n if (events.length) {\n await db.setCursor(call.id, maxId);\n const current = await db.getCall(call.id);\n const over = current && !ACTIVE.includes(current.status);\n return {\n events: events.map(fmt),\n call_status: current?.status ?? call.status,\n ...(over ? { note: `Call is over (${current?.ended_reason ?? current?.status}). Use await_report for the result.` } : {}),\n };\n }\n const current = await db.getCall(call.id);\n if (current && !ACTIVE.includes(current.status)) {\n return {\n events: [],\n call_status: current.status,\n note: `Call is over (${current.ended_reason ?? current.status}). Use await_report for the result.`,\n };\n }\n if (Date.now() > deadline) {\n try {\n const live = await getCallLive(vapiKey, call.id);\n if (live?.status && live.status !== current?.status) {\n await db.setCallStatus(call.id, String(live.status), (live.endedReason as string) ?? null);\n }\n } catch (e) {\n console.log(\"listen: live status check failed:\", String(e).slice(0, 120));\n }\n const synced = await db.getCall(call.id);\n if (synced && !ACTIVE.includes(synced.status)) {\n return {\n events: [],\n call_status: synced.status,\n note: `Call is over (${synced.ended_reason ?? synced.status}). Use await_report for the result.`,\n };\n }\n return {\n events: [],\n call_status: synced?.status ?? \"unknown\",\n ...(synced?.live_partial ? { hearing_now: synced.live_partial } : {}),\n note: \"Nothing new yet — the agent is handling it. listen again, or just await_report.\",\n };\n }\n await new Promise((r) => setTimeout(r, 800));\n }\n },\n },\n {\n name: \"say\",\n description:\n \"Optional supervisor barge-in: speak a verbatim line over the live call yourself (TTS), e.g. to correct the agent or relay a fact it didn't have. Normally unnecessary — the agent drives the call. Set end_call_after true to hang up after the line plays.\",\n inputSchema: {\n type: \"object\",\n properties: {\n text: { type: \"string\", description: \"What to say, verbatim.\" },\n end_call_after: { type: \"boolean\", description: \"Hang up after this line finishes playing.\" },\n },\n required: [\"text\"],\n },\n run: async (args: Record, ctx: Ctx) => {\n const { tenant } = creds(ctx);\n const call = await requireActiveCall(tenant);\n if (!call.control_url) throw new Error(\"No controlUrl stored for this call — cannot inject speech.\");\n const r = await sayOnCall(call.control_url, String(args.text), Boolean(args.end_call_after));\n await db.addEvent(tenant, call.id, \"say\", \"assistant\", String(args.text));\n if (r.status >= 400) throw new Error(`Vapi control rejected say (${r.status}): ${r.body.slice(0, 200)}`);\n return { ok: true, vapi_status: r.status, next: \"Use listen to hear their response, or await_report for the final result.\" };\n },\n },\n {\n name: \"get_status\",\n description:\n \"Snapshot of your latest call: live status straight from Vapi plus the recent event feed. Does not consume listen's cursor. Includes a watch_url where you can see the live transcript.\",\n inputSchema: { type: \"object\", properties: {} },\n run: async (_args: Record, ctx: Ctx) => {\n const { vapiKey, tenant } = creds(ctx);\n const call = await db.latestCall(tenant);\n if (!call) return { note: \"No calls yet.\" };\n let live: Record | null = null;\n try {\n live = await getCallLive(vapiKey, call.id);\n if (live?.status && live.status !== call.status) {\n await db.setCallStatus(call.id, String(live.status), (live.endedReason as string) ?? null);\n }\n } catch (e) {\n live = { error: String(e) };\n }\n const events = await db.recentEvents(call.id, 15);\n return {\n call_id: call.id,\n number: call.number,\n db_status: call.status,\n vapi_status: live?.status ?? null,\n ended_reason: live?.endedReason ?? call.ended_reason ?? null,\n started_at: call.created_at,\n watch_url: call.watch_token ? `${ctx.origin}/?c=${call.id}&k=${call.watch_token}` : null,\n recent_events: events.map(fmt),\n };\n },\n },\n {\n name: \"end_call\",\n description: \"Hang up the live call immediately (e.g. to abort a dispatched call). The agent normally ends calls itself.\",\n inputSchema: { type: \"object\", properties: {} },\n run: async (_args: Record, ctx: Ctx) => {\n const { tenant } = creds(ctx);\n const call = await requireActiveCall(tenant);\n const r = await endCallOnVapi(call.control_url);\n await db.addEvent(tenant, call.id, \"status\", \"system\", \"end-call requested\");\n return { ok: r.status < 400, vapi_status: r.status };\n },\n },\n];\n\nexport async function runTool(name: string, args: Record, ctx: Ctx) {\n const tool = TOOLS.find((t) => t.name === name);\n if (!tool) throw new Error(`Unknown tool: ${name}`);\n console.log(\"tool:\", name, \"tenant:\", ctx.tenant ?? \"none\", JSON.stringify(args ?? {}).slice(0, 200));\n return await tool.run(args ?? {}, ctx);\n}\n",[164],"f629aa82-cd46-4116-bdd6-0acc93a9f1e3","mcp.ts","019ec8e3-8fe9-75a2-9f23-eff83960cf88",30,["D",1781494754691],3,"// Minimal remote MCP server: stateless streamable HTTP, plain JSON responses,\n// no SDK. Handles initialize / ping / tools/list / tools/call; notifications get 202.\n\nimport { type Ctx, runTool, TOOLS } from \"./tools.ts\";\n\nconst KNOWN_VERSIONS = [\"2024-11-05\", \"2025-03-26\", \"2025-06-18\"];\n\nconst SERVER_INSTRUCTIONS =\n `dispatch-my-human-escape: dispatch an autonomous voice agent to phone your human and run the call itself — WITH an escape hatch back to you.\nThe agent has a REAL brain and drives the conversation. But when the human asks something outside its brief, it calls for backup and the call PAUSES until YOU answer.\nPrimary loop:\n 1. dispatch_call({ objective, context?, questions?, number?, first_message?, max_minutes? }) — hand off the call.\n 2. await_report({ wait_seconds }) — long-polls. It returns ONE of:\n • needs_answer:true with an { escalation: { question } } — the agent is stuck on an off-brief question. Reply with provide_answer({ text }), then call await_report again.\n • done:true with { summary, objective_met, answers[], followups, transcript } — the call is over.\n 3. provide_answer({ text }) — pushed into the LIVE call; the agent announces \"just heard back from my operator\" and relays it. It keeps talking while waiting, so it never goes silent.\nIMPORTANT: keep calling await_report for the WHOLE call. If you stop polling, the human's escalated questions never get answered.\nGive a crisp objective, dump context, and list the questions you want answered. Optional: listen (eavesdrop), say (barge in), get_status, end_call.\nSetup: connection URL needs vapi_key and phone_number_id (and ideally human_number, E.164 with + as %2B) from dashboard.vapi.ai. Brain runs on your Vapi OpenAI model (gpt-4o default; &model= to override).`;\n\nconst rpcResult = (id: unknown, result: unknown) => ({ jsonrpc: \"2.0\", id, result });\nconst rpcError = (id: unknown, code: number, message: string) => ({ jsonrpc: \"2.0\", id, error: { code, message } });\n\nasync function handleOne(msg: any, ctx: Ctx) {\n if (!msg || typeof msg !== \"object\" || typeof msg.method !== \"string\") {\n return rpcError(msg?.id ?? null, -32600, \"invalid request\");\n }\n if (msg.id === undefined) {\n console.log(\"mcp notification:\", msg.method);\n return null; // notifications get no body\n }\n console.log(\"mcp request:\", msg.method, \"tenant:\", ctx.tenant ?? \"none\");\n switch (msg.method) {\n case \"initialize\": {\n const v = msg.params?.protocolVersion;\n return rpcResult(msg.id, {\n protocolVersion: KNOWN_VERSIONS.includes(v) ? v : \"2025-06-18\",\n capabilities: { tools: { listChanged: false } },\n serverInfo: { name: \"dispatch-my-human-escape\", version: \"1.0.0\" },\n instructions: SERVER_INSTRUCTIONS,\n });\n }\n case \"ping\":\n return rpcResult(msg.id, {});\n case \"tools/list\":\n return rpcResult(msg.id, {\n tools: TOOLS.map(({ name, description, inputSchema }) => ({ name, description, inputSchema })),\n });\n case \"tools/call\": {\n try {\n const out = await runTool(msg.params?.name, msg.params?.arguments ?? {}, ctx);\n const text = typeof out === \"string\" ? out : JSON.stringify(out, null, 2);\n return rpcResult(msg.id, { content: [{ type: \"text\", text }], isError: false });\n } catch (e) {\n return rpcResult(msg.id, { content: [{ type: \"text\", text: String(e) }], isError: true });\n }\n }\n default:\n return rpcError(msg.id, -32601, `method not found: ${msg.method}`);\n }\n}\n\nexport async function handleMcp(req: Request, ctx: Ctx): Promise {\n if (req.method !== \"POST\") {\n return new Response(\"call-my-human: POST JSON-RPC here (stateless streamable HTTP MCP). GET / for setup.\", {\n status: 405,\n });\n }\n let body: unknown;\n try {\n body = await req.json();\n } catch {\n return Response.json(rpcError(null, -32700, \"parse error\"), { status: 400 });\n }\n const msgs = Array.isArray(body) ? body : [body];\n const replies: unknown[] = [];\n for (const m of msgs) {\n const r = await handleOne(m, ctx);\n if (r) replies.push(r);\n }\n if (!replies.length) return new Response(null, { status: 202 });\n return Response.json(Array.isArray(body) ? replies : replies[0]);\n}\n",[172],"812848e6-8e8e-4528-9ea6-824f9a28e487",["D",1782163623726],12,[28],"50b3f510-3428-4587-a1d8-69c4ecf1be01","db.ts","019ec8e3-8fe9-75a2-9f23-e7bdd7e0ed3f",42,["D",1782163549482],8,"// SQLite layer: calls + an append-only event feed per call, scoped by tenant.\n// A tenant is a hash of the caller's Vapi key (full SHA-256) — every connecting\n// user gets their own call history on this shared public server. The tenant is\n// internal-only: it never appears in a shareable URL. Per-call random secrets\n// (watch_token, webhook_secret) gate the watch page and inbound webhooks instead.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS calls (\n id TEXT PRIMARY KEY,\n tenant TEXT,\n control_url TEXT,\n status TEXT DEFAULT 'starting',\n ended_reason TEXT,\n live_partial TEXT,\n cursor INTEGER DEFAULT 0,\n number TEXT,\n watch_token TEXT,\n webhook_secret TEXT,\n created_at TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tenant TEXT,\n call_id TEXT,\n type TEXT,\n role TEXT,\n content TEXT,\n created_at TEXT\n )`,\n // Escape hatch: a mid-call question the agent routes to the operator. The\n // blocking /tool endpoint inserts a row and waits for `answer` to be filled.\n `CREATE TABLE IF NOT EXISTS escalations (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n tenant TEXT,\n call_id TEXT,\n tool_call_id TEXT,\n question TEXT,\n answer TEXT,\n created_at TEXT,\n answered_at TEXT\n )`,\n]);\n// Older/remixed schemas may predate some columns — add them if missing.\nfor (const sql of [\n `ALTER TABLE calls ADD COLUMN tenant TEXT`,\n `ALTER TABLE calls ADD COLUMN watch_token TEXT`,\n `ALTER TABLE calls ADD COLUMN webhook_secret TEXT`,\n `ALTER TABLE events ADD COLUMN tenant TEXT`,\n]) {\n try {\n await sqlite.execute(sql);\n } catch { /* already there */ }\n}\n\nconst now = () => new Date().toISOString();\n\n// A 128-bit random hex token — used as a per-call watch capability and webhook secret.\nexport function randomToken(bytes = 16): string {\n const a = new Uint8Array(bytes);\n crypto.getRandomValues(a);\n return [...a].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport interface CallRow {\n id: string;\n tenant: string;\n control_url: string;\n status: string;\n ended_reason: string | null;\n live_partial: string | null;\n cursor: number;\n number: string;\n watch_token: string | null;\n webhook_secret: string | null;\n created_at: string;\n}\n\nexport interface EventRow {\n id: number;\n tenant: string;\n call_id: string;\n type: string;\n role: string;\n content: string;\n created_at: string;\n}\n\nexport async function insertCall(\n tenant: string,\n id: string,\n controlUrl: string,\n number: string,\n watchToken: string,\n webhookSecret: string,\n) {\n await sqlite.execute({\n sql: `INSERT INTO calls (id, tenant, control_url, status, cursor, number, watch_token, webhook_secret, created_at)\n VALUES (?, ?, ?, 'starting', 0, ?, ?, ?, ?)`,\n args: [id, tenant, controlUrl, number, watchToken, webhookSecret, now()],\n });\n}\n\nexport async function latestCall(tenant: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM calls WHERE tenant = ? ORDER BY created_at DESC LIMIT 1`,\n args: [tenant],\n });\n return (r.rows[0] as unknown as CallRow) ?? null;\n}\n\nexport async function getCall(id: string): Promise {\n const r = await sqlite.execute({ sql: `SELECT * FROM calls WHERE id = ?`, args: [id] });\n return (r.rows[0] as unknown as CallRow) ?? null;\n}\n\nexport async function setCallStatus(id: string, status: string, endedReason?: string | null) {\n await sqlite.execute({\n sql: `UPDATE calls SET status = ?, ended_reason = COALESCE(?, ended_reason) WHERE id = ?`,\n args: [status, endedReason ?? null, id],\n });\n}\n\nexport async function setPartial(id: string, partial: string | null) {\n await sqlite.execute({ sql: `UPDATE calls SET live_partial = ? WHERE id = ?`, args: [partial, id] });\n}\n\nexport async function setCursor(id: string, cursor: number) {\n await sqlite.execute({ sql: `UPDATE calls SET cursor = ? WHERE id = ?`, args: [cursor, id] });\n}\n\nexport async function addEvent(tenant: string, callId: string, type: string, role: string, content: string) {\n await sqlite.execute({\n sql: `INSERT INTO events (tenant, call_id, type, role, content, created_at) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [tenant, callId, type, role, content, now()],\n });\n}\n\nexport async function eventsAfter(callId: string, afterId: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? AND id > ? ORDER BY id ASC`,\n args: [callId, afterId],\n });\n return r.rows as unknown as EventRow[];\n}\n\nexport async function hasTranscript(callId: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM events WHERE call_id = ? AND type = 'transcript' LIMIT 1`,\n args: [callId],\n });\n return r.rows.length > 0;\n}\n\nexport async function latestEventOfType(callId: string, type: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? AND type = ? ORDER BY id DESC LIMIT 1`,\n args: [callId, type],\n });\n return (r.rows[0] as unknown as EventRow) ?? null;\n}\n\nexport async function transcriptLines(callId: string, limit = 200): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? AND type = 'transcript' ORDER BY id ASC LIMIT ?`,\n args: [callId, limit],\n });\n return r.rows as unknown as EventRow[];\n}\n\nexport async function recentEvents(callId: string, limit = 100): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM events WHERE call_id = ? ORDER BY id DESC LIMIT ?`,\n args: [callId, limit],\n });\n return (r.rows as unknown as EventRow[]).reverse();\n}\n\n// ---------- escalations (the escape hatch) ----------\n\nexport interface EscalationRow {\n id: number;\n tenant: string;\n call_id: string;\n tool_call_id: string;\n question: string;\n answer: string | null;\n created_at: string;\n answered_at: string | null;\n}\n\nexport async function insertEscalation(\n tenant: string,\n callId: string,\n toolCallId: string,\n question: string,\n): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO escalations (tenant, call_id, tool_call_id, question, created_at)\n VALUES (?, ?, ?, ?, ?) RETURNING id`,\n args: [tenant, callId, toolCallId, question, now()],\n });\n return Number((r.rows[0] as unknown as { id: number }).id);\n}\n\nexport async function getEscalation(id: number): Promise {\n const r = await sqlite.execute({ sql: `SELECT * FROM escalations WHERE id = ?`, args: [id] });\n return (r.rows[0] as unknown as EscalationRow) ?? null;\n}\n\n// The oldest still-unanswered question for this tenant (FIFO).\nexport async function pendingEscalation(tenant: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT * FROM escalations WHERE tenant = ? AND answer IS NULL ORDER BY id ASC LIMIT 1`,\n args: [tenant],\n });\n return (r.rows[0] as unknown as EscalationRow) ?? null;\n}\n\nexport async function answerEscalation(id: number, answer: string) {\n await sqlite.execute({\n sql: `UPDATE escalations SET answer = ?, answered_at = ? WHERE id = ? AND answer IS NULL`,\n args: [answer, now(), id],\n });\n}\n\n// Resolve any still-open escalations for a call (e.g. when the call ends before the\n// operator answered) so they stop surfacing as pending.\nexport async function expirePendingEscalations(callId: string, note = \"(call ended before the operator answered)\") {\n await sqlite.execute({\n sql: `UPDATE escalations SET answer = ?, answered_at = ? WHERE call_id = ? AND answer IS NULL`,\n args: [note, now(), callId],\n });\n}\n",[184],"046659d3-9db2-48bc-b13b-bf6b7b231e14","README.md","019ec8e3-8fe9-75a2-9f23-e39b934cea1e",33,["D",1782154986300],2,"# dispatch-my-human-escape — autonomous voice agent with a phone-home escape hatch 📞\n\nA **public remote MCP server**: connect it to any AI agent (Claude Code, Codex, claude.ai) and it dispatches an *autonomous* voice agent to phone your human, run the whole call itself, and report back — **with an escape hatch**. When the human asks something the agent wasn't briefed on, the agent phones *you* (the operator) live, mid-call, keeps chatting while it waits, and relays your answer when it lands. Same BYOK design as its siblings: **no env vars, no server-side keys, no signup.**\n\nThree siblings, three control models:\n\n- [`call-my-human-no-middle-agent`](https://www.val.town/x/dcm31/call-my-human-no-middle-agent) — **puppet**: you drive every word (full control, high latency).\n- [`call-my-human`](https://www.val.town/x/dcm31/call-my-human) — **autonomous**: brief it once, it runs the call, you collect a structured report.\n- `dispatch-my-human-escape` (this one) — **autonomous + async escape hatch**: like dispatch, plus the agent can phone home to you mid-call.\n\n```\nyour agent (operator, any MCP client)\n │ dispatch_call({ objective, context, questions })\n ▼\nthis val ── POST api.vapi.ai/call (your key) ─▶ Vapi ── gpt-4o brain + Elliot voice ─▶ 📱 your human\n ▲ │ │\n │ │ ask_operator(question) ◀──────────────┤ (off-brief? agent phones home, keeps talking)\n │ └─▶ /tool (records it, returns instantly) │\n │ │\n └── await_report ─▶ needs_answer ─▶ provide_answer(text)\n └─▶ add-message into the live call ─▶ agent relays it\n```\n\n## The loop (operator side)\n\n1. **`dispatch_call`** `{ objective, context?, questions?, number?, first_message?, caller_identity?, max_minutes? }` — hand off the call.\n2. **`await_report`** `{ wait_seconds }` — long-poll. Returns either:\n - `needs_answer: true` with `{ escalation: { question } }` — the agent hit an off-brief question. Reply with `provide_answer`, then call `await_report` again.\n - `done: true` with `{ summary, objective_met, answers[], followups, transcript }` — the call is over.\n3. **`provide_answer`** `{ text }` — your answer is pushed into the *live* call and the agent announces + relays it in its own words.\n\nOptional: `listen` (eavesdrop), `say` (barge in), `get_status`, `end_call`.\n\n## How the escape hatch works (async)\n\nThe agent has an `ask_operator(question)` tool. When the human asks something off-brief, it calls it. Our `/tool` endpoint **records the question and returns instantly** — so the agent doesn't go on hold; it keeps the conversation going. Meanwhile `await_report` surfaces the question to you. When you `provide_answer`, we push it into the live call via Vapi's `add-message` (with `triggerResponseEnabled`) — that lands in the agent's *context* (not raw TTS), so it says \"oh — just heard back from my operator…\" and weaves it in, staying in the loop for follow-ups.\n\nIn effect the escape hatch hands the phone agent **your entire toolset**: ask it \"list my files\" and you (the operator) run the tool and relay the result.\n\n## Connect\n\nTwo values from [dashboard.vapi.ai](https://dashboard.vapi.ai): your **private key** and a **phone number ID**.\n\n```sh\nclaude mcp add --transport http dispatch-escape \\\n \"https://dcm31--019ec8e38fe975a29f23e932794ecdea.web.val.run/mcp?vapi_key=YOUR_KEY&phone_number_id=YOUR_PHONE_ID&human_number=%2B15551234567\"\n```\n\nThen tell your agent *\"if you get stuck on the call, ask me.\"* The operator just needs to keep calling `await_report` to catch escalations.\n\n### Raw MCP (no special tooling)\n\nIt's a standard MCP server — drive it from anything that speaks JSON-RPC over HTTP, exactly like Claude Code/Codex do:\n\n```sh\nBASE=\"https://dcm31--019ec8e38fe975a29f23e932794ecdea.web.val.run/mcp\"\nCREDS=\"vapi_key=YOUR_KEY&phone_number_id=YOUR_PHONE_ID&human_number=%2B15551234567\"\ncurl -s \"$BASE?$CREDS\" -H 'content-type: application/json' \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"dispatch_call\",\"arguments\":{\"objective\":\"Quick check-in\"}}}'\n```\n\n`Authorization: Bearer ` is accepted in place of the `vapi_key` query param (and keeps the key out of the URL).\n\n## Security & privacy\n\n- **Your Vapi key is the crown jewel.** Read per request, **never stored, never logged** (only a hash is logged). Everything gates on it — without it, nobody can place calls or read your data. Rotate it if it ever leaks.\n- **BYOK rides in the URL by default.** URLs leak (server/proxy logs, history, referrers), so prefer the `Authorization: Bearer` header. And on a hosted instance you don't own, the **val owner can see your key and transcripts in their logs/DB** — so for anything real, **remix this val and host your own** (zero config). This is the single biggest privacy lever.\n- **Stored data.** Transcripts and structured reports live in the val's SQLite — unencrypted, no expiry — scoped by `tenant` = first 12 hex of SHA-256(your key), unguessable without the key. Remix for full custody.\n- **Watch links are bearer capabilities.** `/?t=` shows the live transcript to anyone with the link (a 48-bit unguessable id). Don't share it for a sensitive call.\n- **Webhook/tool auth is light.** `/webhook` and `/tool` check a secret equal to your tenant id; `/tool` even allows a missing secret. An attacker would need your tenant id (only semi-exposed via watch links) to forge events — and could then only inject fake transcript lines or spurious escalations into your own feed, never place calls or read your key. Remixing + not leaking watch links closes this.\n- **Prompt-injection surface.** Whatever the human says flows into the agent's brain (and into escape-hatch questions). You're calling your own human, so risk is low — but don't wire the operator to take destructive, irreversible actions purely on phoned-in instructions.\n- **Solid bits.** TLS end to end; the val never touches raw audio (Vapi does the telephony, we only receive transcripts); all DB queries are tenant-scoped.\n- **Consent.** Only call numbers you have consent to call — automated calls without consent violate TCPA/FCC rules.\n\n## Files\n\n- `main.ts` — routes, per-tenant Vapi webhook, the async `/tool` escape-hatch endpoint, landing + live feed\n- `tools.ts` — the 7 tools (incl. `provide_answer`); builds the agent's system prompt from your brief\n- `vapi.ts` — Vapi client: native-model call creation with the `ask_operator` tool, `endCall`, analysis plan, and `add-message`\n- `mcp.ts` — minimal stateless streamable-HTTP MCP plumbing (no SDK)\n- `db.ts` — SQLite: `calls`, append-only `events`, and the `escalations` table\n\n## Notes\n\n- Brain: your Vapi account's bundled OpenAI model (`gpt-4o` default; `&model=` to override). Voice: Vapi-native **Elliot** (tuned for telephony). No extra keys for either.\n- The agent ends calls itself via `endCall`; `max_minutes` (default 10) is a hard cap.\n- Phone audio is narrowband (8kHz) — it sounds worse than the Vapi dashboard's web \"test call.\" Free Vapi numbers add latency and have a daily outbound limit; import a Twilio number for reliability.\n",[192],"pulls","branches","forks","envVars",{"_206":208,"_209":63},"connections",{"_206":63,"_207":63},"count","unfilledCount",4,"emptyCount",{"_43":191,"_32":192,"_30":193,"_154":-5,"_41":42,"_40":194,"_156":59,"_38":232,"_13":196,"_33":20,"_35":197,"_24":25,"_161":-5,"_217":233,"_27":234},{"_43":183,"_32":184,"_30":185,"_154":-5,"_41":42,"_40":186,"_156":59,"_38":229,"_13":188,"_33":159,"_35":189,"_24":25,"_161":-5,"_217":230,"_27":231},{"_43":179,"_32":28,"_30":31,"_154":-5,"_41":42,"_40":14,"_156":25,"_38":226,"_13":181,"_33":34,"_35":37,"_24":25,"_161":-5,"_217":227,"_27":228},{"_43":171,"_32":172,"_30":173,"_154":-5,"_41":42,"_40":174,"_156":59,"_38":223,"_13":176,"_33":159,"_35":177,"_24":25,"_161":-5,"_217":224,"_27":225},{"_43":163,"_32":164,"_30":165,"_154":-5,"_41":42,"_40":166,"_156":25,"_38":220,"_13":168,"_33":159,"_35":169,"_24":25,"_161":-5,"_217":221,"_27":222},{"_43":151,"_32":152,"_30":153,"_154":-5,"_41":42,"_40":155,"_156":25,"_38":216,"_13":158,"_33":159,"_35":160,"_24":25,"_161":-5,"_217":218,"_27":219},["D",1782163559821],"children",[],[152],["D",1782163579075],[],[164],["D",1781494754691],[],[172],["D",1782163623726],[],[28],["D",1782163549482],[],[184],["D",1782154986300],[],[192],["D",1781486817181],["D",1789509672838],{"_103":102,"_111":107},{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":93,"_94":95,"_96":50,"_97":98,"_99":65,"_100":45,"_101":102},"ctx",{"_82":-5,"_133":273,"_274":275,"_276":277,"_278":25,"_279":25,"_280":25,"_281":59,"_282":-5,"_283":-7,"_284":-7,"_285":63,"_286":25,"_287":25,"_288":-5,"_289":25,"_290":25,"_291":25,"_292":-5},"ENV",{"_244":245,"_246":247,"_248":90,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v49